693 matches found
Intel® Quartus® Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00632.html...
Authentication Bypass
zoneminder is vulnerable to Authentication Bypass. The vulnerability exists due to the improper permissions check on the snapshot action, which trigger ends up calling shellexec using the supplied Id, allowing an attacker to bypass the authorization mechanism by injecting and executing malicious...
CVE-2022-3758
Removed by vendor...
CVE-2023-22738 Improper Preservation of Permissions in vantage6
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Assigning existing users to a different organizations is currently possible. It may lead to unintended access: if a user from organization A is accidentally assigned to organization B, they will retain...
SUSE CVE-2022-36062
Grafana is an open-source platform for monitoring and observability. In versions prior to 8.5.13, 9.0.9, and 9.1.6, Grafana is subject to Improper Preservation of Permissions resulting in privilege escalation on some folders where Admin is the only used permission. The vulnerability impacts Grafa...
The vulnerability of Fortinet FortiOS operating systems arises from the incorrect assignment of permissions to critical resources, allowing attackers to obtain login credentials for accessing the LDAP server.
The vulnerability of Fortinet FortiOS operating systems is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain login credentials for accessing the LDAP server through a specially crafted...
NetScout nGeniusONE 安全漏洞
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version 6.3.2 build 904, which stems from improper file permissions that allow an authenticated remote user to gain privileges vi...
The vulnerability of Containerd’s execution environment, related to the improper assignment of permissions to critical resources, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Containerd execution environment is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Fortinet FortiNAC network access control mechanism lies in the improper assignment of permissions to critical resources. This allows attackers to gain access to confidential data and enhance their privileges.
The vulnerability of the Fortinet FortiNAC network access control device is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain access to confidential data and enhance their privileges...
VMware vCenter Server local privilege elevation
Added: 12/12/2022 Background VMware vCenter Server is server management software for controlling VMware vSphere environments. Problem Improper permissions on the java-wrapper-vmon file allow authenticated, unprivileged attackers to gain root privileges. Resolution Upgrade to vCenter Server 7.0 U2...
Automox 安全漏洞
Automox is a cloud-based tool from US-based Automox Inc. It can fully automate the patch repair process in Windows, macOS, Linux and third-party software including Adobe, Firefox, Chrome and Windows. A security vulnerability exists in versions prior to Automox Agent 40, which stems from permissio...
The vulnerability of Talos Linux operating system interfaces allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Talos Linux operating systems relates to the improper assignment of permissions for critical resources during the signature verification process. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...
The vulnerability of the DBI interface module of the Perl database library allows attackers to gain access to confidential data and also cause service interruptions.
The vulnerability of the DBI interface module in Perl DBI is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...
The vulnerability of the deref plugin of the 389 Directory Server service allows attackers to access confidential data.
The vulnerability of the deref plugin in the 389 Directory Server service is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 2.2.11.22040751, which stems from Waterplugin containing insufficient permissions or...
Input validation
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
WordPress plugin Sensei LMS 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
CVE-2021-39087
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109...
